Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/uYBkuoJ-DYmTeIbK5FqP03NEXQY.roa
File: uYBkuoJ-DYmTeIbK5FqP03NEXQY.roa (raw, json)
Hash identifier: NSqhjRjj8iaXJXzJOq889gma5RjJNjEyOXVCkMAM+I8=
Subject key identifier: B9:80:64:BA:82:7E:0D:89:93:78:86:CA:E4:5A:8F:D3:73:44:5D:06
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 018CC42483072C11D1FBCB5E58FAB09F1672
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/uYBkuoJ-DYmTeIbK5FqP03NEXQY.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43312
IP address blocks: 2a0e:3304::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 21:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:83:07:2c:11:d1:fb:cb:5e:58:fa:b0:9f:16:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b98064ba827e0d89937886cae45a8fd373445d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:a9:a0:22:62:66:24:c1:6a:c6:0d:e9:62:
66:d3:ac:76:5b:13:d7:ed:73:26:53:99:89:dc:88:
2c:2c:52:89:d1:b4:c9:75:8f:f6:56:8c:12:ba:46:
4b:af:8d:c2:32:c5:de:cd:0c:e4:14:59:27:62:e4:
8a:7d:60:4b:a5:7a:a0:3a:1e:e9:12:b7:8d:55:5e:
8d:da:41:26:b7:15:41:9e:c0:7e:b2:2d:6e:1a:7e:
75:b3:33:cf:67:b8:02:ab:3c:87:5e:f5:7d:de:de:
06:22:bc:9e:54:5b:38:c9:0d:66:9c:ef:27:b1:ca:
32:93:9f:12:ab:83:7b:1a:fd:b8:57:a2:af:c6:48:
b8:f7:09:b7:c3:dd:87:b8:d5:60:cd:49:79:88:5e:
33:34:02:10:24:a7:ad:bd:83:af:49:af:7f:de:30:
a2:60:e1:ba:57:0a:5d:a0:e1:c3:1c:3e:06:58:46:
1b:08:c6:6a:75:50:d5:82:5e:2d:e0:27:f7:28:e0:
2e:6e:61:17:5d:d8:3f:dc:ba:c5:a2:c4:54:93:19:
06:4e:53:87:e8:17:0e:14:6a:d4:42:b2:10:34:90:
4e:2e:58:5e:29:74:a2:8f:a1:ac:13:af:0b:a9:eb:
03:90:71:19:51:7c:a5:b0:f7:8e:cf:57:40:6e:e7:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:80:64:BA:82:7E:0D:89:93:78:86:CA:E4:5A:8F:D3:73:44:5D:06
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/uYBkuoJ-DYmTeIbK5FqP03NEXQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3304::/32
Signature Algorithm: sha256WithRSAEncryption
5c:74:6a:0d:cd:17:e6:21:a4:09:29:f3:54:30:7c:8c:c6:a4:
35:43:24:f4:b4:30:79:90:71:3a:c6:f9:ed:a6:09:f4:6e:16:
2b:cc:44:fe:35:35:0a:2d:ee:36:1a:8b:d9:77:71:ad:99:13:
12:e2:2f:45:7c:12:2e:d3:39:ee:88:00:f4:7d:78:2f:d0:e4:
4c:53:8e:f7:df:59:ca:8d:90:03:09:40:04:11:3b:59:6c:57:
ee:49:c0:32:f9:ea:31:f9:cb:06:f3:fa:eb:62:b4:76:2d:bb:
17:a2:f1:22:19:a9:b3:77:08:5c:65:32:ce:b0:8e:44:76:83:
5d:ba:85:6f:a4:97:08:70:36:c0:dc:b2:d3:fc:ec:62:c5:26:
e9:9a:0d:9b:55:6d:b8:7d:b3:80:45:a0:dc:1e:41:ee:1d:e9:
2f:ac:68:5e:a4:85:eb:15:d9:19:6d:8d:02:eb:84:fd:8c:fc:
51:98:da:be:8f:ea:39:60:7b:95:f1:1d:f0:9b:ab:42:b0:c0:
c8:78:f8:cb:5f:6e:0a:43:17:39:2c:92:17:da:1c:f0:36:aa:
ae:76:d6:5b:eb:27:0f:e3:5f:d4:4d:bf:c4:e6:38:78:7b:17:
91:d8:24:3c:5a:7c:1f:ac:3b:ab:9c:29:6f:82:b8:ba:8a:0b:
9a:02:4d:7a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzEJIMHLBHR+8teWPqwnxZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0
NTlmZWQwHhcNMjQwMTAxMDgyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTgwNjRiYTgyN2UwZDg5OTM3ODg2Y2FlNDVhOGZkMzczNDQ1ZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqKpoCJiZiTBasYN6WJm06x2WxPX
7XMmU5mJ3IgsLFKJ0bTJdY/2VowSukZLr43CMsXezQzkFFknYuSKfWBLpXqgOh7p
EreNVV6N2kEmtxVBnsB+si1uGn51szPPZ7gCqzyHXvV93t4GIryeVFs4yQ1mnO8n
scoyk58Sq4N7Gv24V6Kvxki49wm3w92HuNVgzUl5iF4zNAIQJKetvYOvSa9/3jCi
YOG6VwpdoOHDHD4GWEYbCMZqdVDVgl4t4Cf3KOAubmEXXdg/3LrFosRUkxkGTlOH
6BcOFGrUQrIQNJBOLlheKXSij6GsE68LqesDkHEZUXylsPeOz1dAbudANQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLmAZLqCfg2Jk3iGyuRaj9NzRF0GMB8GA1UdIwQY
MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt
MzBmZjJjODNmMDAxLzEvdVlCa3VvSi1EWW1UZUliSzVGcVAwM05FWFFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx
LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg4zBDAN
BgkqhkiG9w0BAQsFAAOCAQEAXHRqDc0X5iGkCSnzVDB8jMakNUMk9LQweZBxOsb5
7aYJ9G4WK8xE/jU1Ci3uNhqL2XdxrZkTEuIvRXwSLtM57ogA9H14L9DkTFOO999Z
yo2QAwlABBE7WWxX7knAMvnqMfnLBvP662K0di27F6LxIhmps3cIXGUyzrCORHaD
XbqFb6SXCHA2wNyy0/zsYsUm6ZoNm1VtuH2zgEWg3B5B7h3pL6xoXqSF6xXZGW2N
AuuE/Yz8UZjavo/qOWB7lfEd8JurQrDAyHj4y19uCkMXOSySF9oc8DaqrnbWW+sn
D+Nf1E2/xOY4eHsXkdgkPFp8H6w7q5wpb4K4uooLmgJNeg==
-----END CERTIFICATE-----
Generated at Tue Jul 2 03:54:15 2024 by rpki-client on console-fra.rpki-client.org